Skip to content

Free self-assessment

Measure your exposure in 20 questions

Twenty obligations, one per question. At the end: the nature of your exposure (administrative, criminal), your priorities and the plan to close them. Answering requires no sign-up.

Register & filings—
Consent & information—
Data-subject rights—
Security & breaches—
Processors & transfers—
Governance & retention—
Question 1/20Register & filings

Do you keep a written, up-to-date list of every file holding customer, employee or partner data (the processing register)?

Law No. 2024/017 — art. 29

No sign-up

Daily penalties

after an unheeded formal notice, up to suspension of activity (art. 54).

Administrative fines

processing without authorization, weak security, unauthorized transfers (art. 55–61).

Criminal penalties

incurred by executives, and by legal entities (art. 63–71).

Penalties set by Law No. 2024/017, art. 54 to 71. The compliance deadline expired on 23 June 2026; the Authority's creation decree is pending, and criminal penalties apply without it. We do not quote a scale that a bar-admitted lawyer has not signed off — it is the rule we apply to all seventeen jurisdictions, and we apply it to ourselves here.

Free self-assessment — Law No. 2024/017